PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Introducing CloudFox GCP: Attack Path Identification for Google Cloud

bishopfox.com | blog | #cloud | #cloud-security | #privilege-escalation | #iam | #gcp | #attack-paths | #cloudfox
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CloudFox GCP extends attack-path discovery to Google Cloud: enumerate resources and map IAM inheritance and service-account risk across the org hierarchy; FoxMapper adds privilege escalation chains.
Published
Collected

Related coverage

blog · bishopfox.com
Introducing: CloudFox
Introducing CloudFox, a read-only CLI tool that helps penetration testers enumerate unfamiliar cloud environments and uncover exploitable attack paths, starting with AWS support.
blog · hunt.io
Over 68 GB of Philippine Overseas-Employment Database Backups Copied From an Exposed Staging Server
An exposed staging server at UpCloud revealed a completed 68 GB copy of 27 Philippine overseas-employment database backups, a rebranded GodPotato privilege escalation tool, and the operator's own transfer logs.
blog · bugbunny.ai
Cloud Security Posture Management: From Misconfigurations to Attack Paths
CSPM done well: stop counting misconfigurations and prioritize those combining public access, broad IAM and sensitive data into real attack paths—with owner context and exception expiry.
blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · netspi.com
Escalating Privileges in Google Cloud via Open Groups
Google Groups with open join settings that hold IAM roles in GCP let any organization member self-join and inherit those permissions. Google classified the issue as Won't Fix, intended behavior.
blog · wiz.io
Wiz launches support for Google Cloud excessive access findings based on audit logs
Wiz adds excessive-access findings for Google Cloud based on audit logs, letting all GCP customers—even without IAM Recommender—identify over-provisioned identities and right-size permissions.
Back